[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

SDSI syntax




Simon raised the question of having negative assertions in SDSI.

I would like to note that SDSI does support strong negative assertions
for group membership; a server can indeed give a ``negative membership
certificate''.  

SDSI has no other form of negative assertion, probably because the only
other real form of assertion in SDSI is a name/value binding, and it is
not clear what a negative name/value assertion's function would be.  

	Cheers,
	Ron
	[SDSI paper is a http://theory.lcs.mit.edu/sdsi.ps or .tex]